$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json) Hash identifier: v00CFiJbUFHkfS5WCo1A9hpGHYJfJPnT1vhGUP3xMHk= Subject key identifier: B5:AE:9B:3A:D0:D5:9B:BA:F8:FA:79:5B:EE:99:5F:57:3D:1E:7F:39 Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Certificate serial: 0598 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft Manifest number: 0592 Signing time: Wed 20 Nov 2024 22:46:51 +0000 Manifest this update: Wed 20 Nov 2024 22:46:51 +0000 Manifest next update: Wed 27 Nov 2024 22:46:51 +0000 Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: L53gBsxDrzdeXbtfOYkwT/uueJpWqBUX9XJYjaSGNxY=) 2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 2zuRRC9X9QGiy5zsxYozQv/RNV6iHA3e11RJdVWl2NQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 20:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1432 (0x598) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2 Validity Not Before: Nov 20 22:46:51 2024 GMT Not After : Nov 27 22:46:51 2024 GMT Subject: CN=673e66db-2d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:87:6a:99:e5:a7:cf:46:dd:8a:2e:32:b5:41: e2:c3:f1:33:2a:04:be:43:20:31:96:49:cf:00:8a: a0:af:d3:9b:05:41:2f:f4:f8:12:51:c0:03:5e:c2: ac:d6:a8:c4:24:18:a7:b2:ce:a9:c8:94:d5:99:cf: 3a:df:c6:72:07:ff:a0:51:45:c5:90:37:ff:70:48: 81:43:0b:6b:5f:49:b8:7a:38:2d:b6:b5:83:23:3f: ef:12:ee:af:c3:95:d0:2d:d9:d0:8d:dc:92:8e:32: b1:1b:b9:e2:22:44:a7:7f:60:56:ac:45:c4:b3:44: a1:9b:5a:8d:d1:47:0b:ba:f6:db:66:40:48:33:3f: 3c:cf:d0:ca:b1:3e:fc:af:c0:c7:f6:7d:f6:27:8d: e1:de:25:54:bd:f0:b3:e6:75:5d:01:37:00:39:4c: 7b:68:63:af:f0:73:01:e5:fa:0a:90:fa:fb:d9:a2: 7c:8b:44:ae:d6:81:8b:06:d1:64:ed:b3:a0:7f:04: 9e:87:4f:87:90:10:11:ec:db:98:46:26:92:39:ce: c3:6a:54:18:36:62:57:fd:b1:1f:86:fd:65:f3:51: 62:af:1e:4c:e0:ae:81:09:ae:a6:8f:1e:12:4c:52: 96:55:78:06:19:a1:f1:bf:9d:39:60:e6:3c:f1:a8: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:AE:9B:3A:D0:D5:9B:BA:F8:FA:79:5B:EE:99:5F:57:3D:1E:7F:39 X509v3 Authority Key Identifier: keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:98:ca:0c:92:31:63:a8:c7:de:ee:6d:09:72:74:0f:d3:6f: 48:bf:86:db:f0:69:dd:14:dc:35:9b:21:d0:f9:e1:df:34:00: d8:98:ec:35:84:ea:04:7f:29:53:89:7a:1f:e7:1a:94:da:55: 6f:6a:e4:b3:75:4c:0c:e8:73:35:04:12:81:a9:da:16:02:05: 7e:f9:77:d0:a8:2b:90:fd:ba:7e:f7:3c:99:66:94:e5:3a:59: 52:68:05:88:d7:77:02:87:35:81:86:9f:e2:a2:fc:12:f1:62: 07:60:e9:2d:0f:20:c4:79:2d:ae:9d:f3:91:44:26:aa:96:5a: c3:57:32:17:78:57:9c:ab:14:9e:d9:a9:d4:73:77:c3:20:2f: 21:75:db:13:8a:67:4b:26:ed:58:7e:87:d8:70:fc:1c:e5:30: ab:5d:55:b0:f2:43:0f:4a:c4:24:16:26:a9:1a:d2:24:db:db: 30:b5:f2:ca:85:4a:ec:03:7e:96:3e:8d:88:a4:5f:7c:0b:18: 86:eb:cf:01:5e:c0:0e:e0:99:c8:32:01:ef:5e:50:fd:72:74: 2b:f2:bc:43:82:be:dd:fb:9a:57:c6:b0:d4:07:57:4e:80:32: 56:2a:70:52:7f:53:c5:19:1d:9e:48:fc:dd:da:2b:6a:df:36: 54:4e:4f:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMxMEIxMTAvBgNVBAUTKDA4RDNGQkE4RERDMjE4Q0JCMzAzOUMwMzc2MUU2QUI3 MDc2RTRGQTIwHhcNMjQxMTIwMjI0NjUxWhcNMjQxMTI3MjI0NjUxWjAYMRYwFAYD VQQDEw02NzNlNjZkYi0yZDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtodqmeWnz0bdii4ytUHiw/EzKgS+QyAxlknPAIqgr9ObBUEv9PgSUcADXsKs 1qjEJBinss6pyJTVmc8638ZyB/+gUUXFkDf/cEiBQwtrX0m4ejgttrWDIz/vEu6v w5XQLdnQjdySjjKxG7niIkSnf2BWrEXEs0Shm1qN0UcLuvbbZkBIMz88z9DKsT78 r8DH9n32J43h3iVUvfCz5nVdATcAOUx7aGOv8HMB5foKkPr72aJ8i0Su1oGLBtFk 7bOgfwSeh0+HkBAR7NuYRiaSOc7DalQYNmJX/bEfhv1l81Firx5M4K6BCa6mjx4S TFKWVXgGGaHxv505YOY88ahKCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWumzrQ 1Zu6+Pp5W+6ZX1c9Hn85MB8GA1UdIwQYMBaAFAjT+6jdwhjLswOcA3YearcHbk+i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzEwQi83QjZDQTEyMkFG NjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dNdXpBNXdEZGg1cXR3ZHVU NkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NOUDdxTjNDR011ekE1d0RkaDVxdHdkdVQ2SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzEwQi83QjZDQTEyMkFGNjIxMUVCOEJBMUY3MTRDNEY5QUUwMi9DTlA3cU4zQ0dN dXpBNXdEZGg1cXR3ZHVUNkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgmMoMkjFjqMfe7m0JcnQP029Iv4bb8GndFNw1myHQ+eHfNADYmOw1 hOoEfylTiXof5xqU2lVvauSzdUwM6HM1BBKBqdoWAgV++XfQqCuQ/bp+9zyZZpTl OllSaAWI13cChzWBhp/iovwS8WIHYOktDyDEeS2unfORRCaqllrDVzIXeFecqxSe 2anUc3fDIC8hddsTimdLJu1YfofYcPwc5TCrXVWw8kMPSsQkFiapGtIk29swtfLK hUrsA36WPo2IpF98CxiG688BXsAO4JnIMgHvXlD9cnQr8rxDgr7d+5pXxrDUB1dO gDJWKnBSf1PFGR2eSPzd2itq3zZUTk+u -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:20 2024 by rpki-client on console-fra.rpki-client.org